Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2a2a7398-b5f7-35e5-ad00-960cf5bd2d9a.roa
File:                     2a2a7398-b5f7-35e5-ad00-960cf5bd2d9a.roa (raw, json)
Hash identifier:          Ey4h2JpU/pvaQB/fP8QxDLBKRh7IVcoI+TjBroCTBi8=
Subject key identifier:   E6:D6:B6:09:E1:6E:32:36:EF:9D:4A:9F:40:59:4A:24:3B:92:20:9C
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584ECBD1DF7788A48C87D1365300
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2a2a7398-b5f7-35e5-ad00-960cf5bd2d9a.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     16696
IP address blocks:        45.248.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:df:77:88:a4:8c:87:d1:36:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=db384237-bd85-4135-8c45-5d62a2ba5177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:37:23:52:bd:ec:50:ae:94:eb:cb:88:2c:
                    c8:8b:13:2f:bc:ef:aa:3a:23:44:3e:16:cc:37:42:
                    6d:c6:68:7d:2c:9c:6e:a7:84:97:54:d3:e6:c6:07:
                    8d:e9:53:9f:64:90:11:d0:fe:b8:85:32:12:c4:41:
                    71:18:a0:64:54:70:1d:c7:39:4b:54:10:a6:13:6b:
                    a4:cc:b6:a3:d0:ac:a7:22:32:ec:24:49:f9:d4:76:
                    88:2b:a0:83:d1:f1:09:90:36:82:a5:0d:30:72:5f:
                    e9:43:6c:cc:3a:6d:67:59:09:b1:20:7b:2c:23:d7:
                    f4:1a:49:2e:95:0e:a2:90:6d:f0:13:35:f0:fc:b0:
                    77:4d:37:99:6d:dd:3b:89:e5:e1:2c:1e:be:c9:03:
                    25:79:24:ad:14:ad:f6:5f:86:d3:a7:ed:74:80:88:
                    30:fd:d2:a9:66:77:2b:31:c7:31:21:1b:be:2e:7d:
                    6b:33:48:57:ca:60:01:a3:33:ec:29:d8:6c:39:2a:
                    30:fa:40:35:51:23:17:5d:b4:52:69:9e:ba:ed:84:
                    40:79:00:a3:e2:cf:83:8a:7a:2c:74:99:51:84:ce:
                    48:de:c3:7f:dc:d5:ac:a1:fd:d7:4f:f2:81:80:88:
                    8f:67:95:f9:b2:4d:53:65:ed:12:b1:e8:de:b5:85:
                    82:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D6:B6:09:E1:6E:32:36:EF:9D:4A:9F:40:59:4A:24:3B:92:20:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2a2a7398-b5f7-35e5-ad00-960cf5bd2d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:6b:5d:c3:28:65:57:17:74:ff:8e:60:22:12:92:0b:21:d1:
         c1:a0:3d:94:9e:f5:f2:07:6b:3e:30:f2:09:d6:ff:82:56:7a:
         58:7d:78:68:4e:f1:59:55:1a:68:61:60:04:7c:fe:07:88:b9:
         7f:02:56:21:a7:6c:a9:78:3a:45:ba:60:b0:2f:dc:e9:70:67:
         0b:05:9a:bb:d6:5f:66:d1:69:d1:6e:67:44:af:9d:9e:52:a0:
         06:97:d0:bc:2a:68:29:3b:cf:49:be:9c:82:9a:71:32:d2:e1:
         80:22:6b:71:7a:db:f5:bc:32:e4:a7:39:30:24:9b:f2:83:df:
         5c:60:82:eb:09:0c:d0:ed:b9:44:a8:98:15:e7:98:9d:fb:11:
         ea:21:d8:28:e4:fa:ae:f7:c9:47:4b:33:91:69:a8:d5:d0:04:
         4f:0b:c5:d7:fd:6f:28:62:07:ff:d7:2e:c3:50:38:42:47:9c:
         a2:a0:63:6c:85:fb:d6:a9:44:82:eb:65:42:a8:17:eb:69:5b:
         1a:65:7d:80:d9:44:3b:91:26:8a:37:7a:1f:71:8d:f9:19:33:
         e0:e6:68:7d:fc:cf:ab:53:59:08:a1:92:20:a6:1a:f8:00:aa:
         28:0c:95:a4:ed:4d:6b:97:fa:3a:79:ec:2a:44:72:0e:d9:04:
         d5:b7:2d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:52:28 2026 by rpki-client